This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MU3iQbtIGSCi-gEBMRJLCaWspYA.roa File: MU3iQbtIGSCi-gEBMRJLCaWspYA.roa (raw, json) Hash identifier: En5mPfbDBe1v/gUtsXR10PevyuW0sDZPlNz+ERlyJy8= Subject key identifier: 31:4D:E2:41:BB:48:19:20:A2:FA:01:01:31:12:4B:09:A5:AC:A5:80 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019AA1B3E726310F8F3A6F0A27F4EEA6EFC2 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MU3iQbtIGSCi-gEBMRJLCaWspYA.roa Signing time: Thu 20 Nov 2025 14:38:33 +0000 ROA not before: Thu 20 Nov 2025 14:38:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34872 IP address blocks: 45.154.97.0/24 maxlen: 32 45.154.99.0/24 maxlen: 32 62.3.50.0/24 maxlen: 32 194.28.96.0/24 maxlen: 32 194.28.98.0/23 maxlen: 32 2a0c:b640::/32 maxlen: 128 2a0c:b641::/44 maxlen: 128 2a0c:b641:10::/44 maxlen: 128 2a0c:b641:50::/44 maxlen: 128 2a0c:b641:60::/44 maxlen: 128 2a0c:b641:530::/44 maxlen: 128 2a0c:b641:5e0::/44 maxlen: 48 2a0c:b641:6d0::/44 maxlen: 128 2a0c:b641:70f::/48 maxlen: 128 2a0c:b641:730::/44 maxlen: 128 2a0c:b641:820::/44 maxlen: 128 2a0f:8400::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:b3:e7:26:31:0f:8f:3a:6f:0a:27:f4:ee:a6:ef:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Nov 20 14:38:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=314de241bb481920a2fa010131124b09a5aca580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c6:93:ae:3a:9d:43:d1:31:a8:c9:ce:79:79: 47:a6:e8:a5:32:91:98:63:7c:07:02:5f:32:88:8a: ab:eb:14:b2:b1:05:72:d5:df:ab:c3:75:46:6e:87: 23:55:ec:c3:a8:30:02:d3:79:01:c1:25:74:d3:33: ab:78:9c:c7:2b:a5:a3:65:77:53:01:2c:26:9f:a8: 84:05:98:67:b9:9d:4e:c2:40:79:8e:53:c0:76:ba: 71:f7:d6:ec:69:f5:c0:9f:8e:00:95:3d:d7:47:f2: 55:5c:84:86:3c:9f:fd:92:d1:17:86:43:20:00:93: e3:e2:87:32:62:65:43:c2:fd:32:57:12:b9:d6:8a: a3:d1:1b:03:e4:e3:2d:55:30:24:17:cb:cb:57:4a: 1b:2f:50:0e:53:fb:e3:18:40:e3:dc:e6:79:0e:84: cc:3c:79:f5:f8:36:6c:a7:4a:fb:58:3a:2a:cf:85: b0:67:69:8a:3f:2b:2a:62:9b:12:46:c9:b8:8f:c8: 5b:c1:92:49:b1:c4:c6:e2:20:66:4a:6d:85:0b:66: 39:40:e5:05:b7:cc:3e:78:2f:f8:27:fe:c2:67:47: ba:8f:ae:db:03:ed:8d:04:c4:00:41:c1:a4:d2:07: d8:41:f5:b9:b3:5e:2f:6a:0c:92:d6:df:bb:0c:5a: e3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4D:E2:41:BB:48:19:20:A2:FA:01:01:31:12:4B:09:A5:AC:A5:80 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MU3iQbtIGSCi-gEBMRJLCaWspYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.97.0/24 45.154.99.0/24 62.3.50.0/24 194.28.96.0/24 194.28.98.0/23 IPv6: 2a0c:b640::-2a0c:b641:1f:ffff:ffff:ffff:ffff:ffff 2a0c:b641:50::-2a0c:b641:6f:ffff:ffff:ffff:ffff:ffff 2a0c:b641:530::/44 2a0c:b641:5e0::/44 2a0c:b641:6d0::/44 2a0c:b641:70f::/48 2a0c:b641:730::/44 2a0c:b641:820::/44 2a0f:8400::/32 Signature Algorithm: sha256WithRSAEncryption 8a:ad:dd:26:f1:df:67:00:3b:16:3c:3a:9a:ed:fe:6a:fe:0e: 9c:13:2c:6e:6a:88:e1:21:b0:f7:b1:25:fb:94:59:a3:55:6d: 63:f3:5c:54:09:5c:c1:70:5c:84:8b:11:8a:49:c7:d5:fa:bb: 9e:37:0f:90:be:14:d7:c1:54:c9:4d:53:6d:d5:90:23:d1:4f: 4c:d3:28:0a:97:7b:a4:ae:0e:b9:46:43:18:1a:ba:ff:c2:81: 67:93:71:6c:23:c3:d1:81:af:94:6c:96:5f:80:a8:77:6f:4a: 2c:61:89:75:43:c8:ff:1c:e1:06:49:5b:73:71:ad:c5:3d:af: b2:f4:f7:78:40:46:45:5c:16:54:ec:55:d9:66:dd:cb:de:b6: ea:cd:37:bc:92:af:b1:90:cb:29:05:5f:32:6d:40:a8:2c:7a: 4a:55:69:a8:89:ec:7f:31:b6:8d:da:60:b7:54:56:48:3b:40: 87:82:28:23:40:ed:39:1a:36:bf:0e:99:46:46:58:74:19:b9: 80:2a:63:30:d6:08:d9:a1:60:27:45:60:2d:86:88:75:e2:bc: ca:ca:95:b6:be:5f:6f:db:03:b6:e4:30:01:ce:38:8b:04:77: b6:ec:a6:6d:0e:c3:51:46:56:1b:cb:9b:7a:f7:b5:0d:7b:e9: d6:41:06:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgISAZqhs+cmMQ+POm8KJ/Tupu/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjUxMTIwMTQzODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTRkZTI0MWJiNDgxOTIwYTJmYTAxMDEzMTEyNGIwOWE1YWNhNTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMaTrjqdQ9ExqMnOeXlHpuilMpGY Y3wHAl8yiIqr6xSysQVy1d+rw3VGbocjVezDqDAC03kBwSV00zOreJzHK6WjZXdT ASwmn6iEBZhnuZ1OwkB5jlPAdrpx99bsafXAn44AlT3XR/JVXISGPJ/9ktEXhkMg AJPj4ocyYmVDwv0yVxK51oqj0RsD5OMtVTAkF8vLV0obL1AOU/vjGEDj3OZ5DoTM PHn1+DZsp0r7WDoqz4WwZ2mKPysqYpsSRsm4j8hbwZJJscTG4iBmSm2FC2Y5QOUF t8w+eC/4J/7CZ0e6j67bA+2NBMQAQcGk0gfYQfW5s14vagyS1t+7DFrjiQIDAQAB o4ICjzCCAoswHQYDVR0OBBYEFDFN4kG7SBkgovoBATESSwmlrKWAMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvTVUzaVFidElHU0NpLWdFQk1SSkxDYVdzcFlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGkBggrBgEFBQcBBwEB/wSBlDCBkTAkBAIAATAeAwQALZph AwQALZpjAwQAPgMyAwQAwhxgAwQBwhxiMGkEAgACMGMwEAMFBioMtkADBwUqDLZB AAAwEgMHBCoMtkEAUAMHBCoMtkEAYAMHBCoMtkEFMAMHBCoMtkEF4AMHBCoMtkEG 0AMHACoMtkEHDwMHBCoMtkEHMAMHBCoMtkEIIAMFACoPhAAwDQYJKoZIhvcNAQEL BQADggEBAIqt3Sbx32cAOxY8Oprt/mr+DpwTLG5qiOEhsPexJfuUWaNVbWPzXFQJ XMFwXISLEYpJx9X6u543D5C+FNfBVMlNU23VkCPRT0zTKAqXe6SuDrlGQxgauv/C gWeTcWwjw9GBr5Rsll+AqHdvSixhiXVDyP8c4QZJW3NxrcU9r7L093hARkVcFlTs Vdlm3cveturNN7ySr7GQyykFXzJtQKgsekpVaaiJ7H8xto3aYLdUVkg7QIeCKCNA 7TkaNr8OmUZGWHQZuYAqYzDWCNmhYCdFYC2GiHXivMrKlba+X2/bA7bkMAHOOIsE d7bspm0Ow1FGVhvLm3r3tQ176dZBBk8= -----END CERTIFICATE-----Generated at Fri Dec 5 20:26:57 2025 by rpki-client